Monitoring BGP stats from Palo Alto/Panorama

[tstores]

Can Palo Alto monitor BGP stats?

[ssharma]

@tstores,

You can monitor BGP on Palo Alto device at following location :

You can click on More Runtime Stats and navigate around available option.

You can also look under Monitor -> System log and look for BGP events. Thank you.

[hshah]

Hi Tstores,

You can have majority of stats from CLI and Webgui of The Firewall. You can load firewall in panorama and than view BGP stats.

WebGUI:

From CLI:

admin@132-PA-200> show routing protocol bgp

> loc-rib          show BGP local-rib

> loc-rib-detail   show BGP local-rib

> peer             show BGP peer status

> peer-group       show BGP peer group status

> policy           show BGP route-map status

> rib-out          show BGP routes sent to BGP peer

> rib-out-detail   show BGP routes sent to BGP peer

> summary          show BGP summary information

Regards,

Hardik Shah

[tstores]

Is there a supported MIB for snmp of BGP stats? I hope that makes some sense.

[ssharma]

Yes there are few traps available :

panROUTINGRoutedBGPPeerEnterEstablishedTrap NOTIFICATION-TYPE

    OBJECTS {

  panReceiveTime, panSerial, panEventType, panEventSubType, panVsys, panSeqno, panActionflags, panSystemEventId, panSystemObject, panSystemModule, panSystemSeverity, panSystemDescription

  }

  STATUS current

  DESCRIPTION

    "BGP peer session enters established state."

  ::={panCommonEventEventsV2 1531}

  panROUTINGRoutedBGPPeerLeftEstablishedTrap NOTIFICATION-TYPE

    OBJECTS {

  panReceiveTime, panSerial, panEventType, panEventSubType, panVsys, panSeqno, panActionflags, panSystemEventId, panSystemObject, panSystemModule, panSystemSeverity, panSystemDescription

  }

  STATUS current

  DESCRIPTION

    "BGP peer session left established state."

  ::={panCommonEventEventsV2 1532}

You can look at following MIB file for detailed information :

https://live.paloaltonetworks.com/docs/DOC-6587

Hope this helps. Thank you.